Allow Network access(Only certain MAC addresses)

We have a network at work and I want to have a MAC address database filled with all the machines that we own. If someone comes in from the outside and plugs into one of our jacks I don't want them to get any access to the network. I don't want them to obtain an IP address and I don't want them to be able to hard code a static IP address. I've looked at Cisco's Network Registrar, but that still allows someone to make up a static IP. Any ideas or leads would be GREAT.

If you have cisco switches then just enable the port security where only a certain MAC can plug into that jack.

What if you dont have a cisco switch. Can it be done on linux?

I've read about that, but that would be too much administration. The reason for a MAC database is so I don't have to go to every port and tell it a certain MAC address that can be used. Plus if I did what you mention if someone with a legitimate PC moves from one office to another and plugs in the PC it wouldn't work unless I go and change the Port Security to allow that MAC address. The two things I'm looking for is easy administration and MAC database.